feat: add media server

modules/20-services-apps/gluetun/.env.example

@@ -0,0 +1,33 @@
+# Gluetun VPN (.env example)
+# Copy to modules/20-services-apps/gluetun/.env and fill in values
+
+# Provider and VPN type
+VPN_SERVICE_PROVIDER=mullvad
+VPN_TYPE=wireguard
+
+# Wireguard credentials (required)
+# Generate from Mullvad account: private key and tunnel IP address
+WIREGUARD_PRIVATE_KEY=
+# Example: 10.64.0.2/32
+WIREGUARD_ADDRESSES=
+
+# Server selection (one of the following is recommended)
+#SERVER_CITIES="Los Angeles"
+#SERVER_COUNTRIES="United States"
+
+# Exact server pinning (optional; supports comma-separated list)
+# For Jakarta example:
+#SERVER_HOSTNAMES=id-jpu-wg-001
+#SERVER_HOSTNAME=id-jpu-wg-001
+
+# Updater period (optional)
+#UPDATER_PERIOD=24h
+
+# Firewall rules (optional)
+# Allow outbound traffic to RFC1918 subnets so LAN services can be reached
+# Example: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+#FIREWALL_OUTBOUND_SUBNETS=
+
+# If you need to accept inbound connections through Gluetun (e.g., expose qBittorrent UI),
+# publish the port in Terraform and optionally set FIREWALL_INPUT_PORTS as well
+#FIREWALL_INPUT_PORTS=8080